Security Advisory

CVE-2024-7474

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-29 12:46:34

Last updated 2025-01-09 17:14:10

Assigner @huntr_ai

CVSS score 9.1

State PUBLISHED

Description

In version 1.3.2 of lunary-ai/lunary, an Insecure Direct Object Reference (IDOR) vulnerability exists. A user can view or delete external users by manipulating the 'id' parameter in the request URL. The application does not perform adequate checks on the 'id' parameter, allowing unauthorized access to external user data.

← Browse all CVEs View on cve.org ↗